Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
HOWTO pptpclient with MS vpn server
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2, 3, 4, 5  Next  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
daviessm
n00b
n00b


Joined: 20 May 2005
Posts: 36

PostPosted: Mon May 23, 2005 11:02 am    Post subject: Re: routing weirdness Reply with quote

wmgoree wrote:
If it's like what I had, your ppp0 has foolishly taken a route that your physical interface should have.
Yep, that's exactly what's going on. Will I be able to add those route commands to my ip-up.ppp0 script, or is the silly route set up after that?

Thanks
Back to top
View user's profile Send private message
wmgoree
Apprentice
Apprentice


Joined: 08 Aug 2003
Posts: 246
Location: Alexandria, VA

PostPosted: Mon May 23, 2005 7:19 pm    Post subject: Reply with quote

You can put it in your ifup script, or you can write a wrapper that calls ifup and then does the routing. Either way works.
_________________
vi? *snicker* it doesn't even include a mail reader...
Back to top
View user's profile Send private message
powah
n00b
n00b


Joined: 29 Mar 2005
Posts: 54

PostPosted: Thu Jun 02, 2005 2:03 am    Post subject: remote login to PPTP VPN from home Reply with quote

I want to connect to my company's PPTP VPN from home.
I follow the instructions at
http://pptpclient.sourceforge.net/howto-gentoo.phtml
and had applied the MPPE patch to the kernel version 2.6.11-gentoo-r8.
My ppp0 can be setup but cannot reach my destination.

After ppp0 is setup.
# netstat -rn
Kernel IP routing table

Code:

Destination   Gateway       Genmask         Flags  MSS Window  irtt Iface
10.0.1.1      0.0.0.0       255.255.255.255 UH      0 0          0 ppp0
192.168.2.0   0.0.0.0       255.255.255.0   U       0 0          0 eth0
127.0.0.0     127.0.0.1     255.0.0.0       UG      0 0          0 lo
0.0.0.0       192.168.2.1   0.0.0.0         UG      0 0          0 eth0


My destination IP address is 174.31.0.219 with gateway address 174.31.0.1, so I do this.
# route add -net 174.31.0.0 netmask 255.255.255.0 dev ppp0
# netstat -rn
Kernel IP routing table
Code:

Destination   Gateway       Genmask         Flags  MSS Window  irtt Iface
10.0.1.1      0.0.0.0       255.255.255.255 UH      0 0          0 ppp0
174.31.0.0    0.0.0.0       255.255.255.0   U       0 0          0 ppp0
192.168.2.0   0.0.0.0       255.255.255.0   U       0 0          0 eth0
127.0.0.0     127.0.0.1     255.0.0.0       UG      0 0          0 lo
0.0.0.0       192.168.2.1   0.0.0.0         UG      0 0          0 eth0


# traceroute 174.31.0.219
traceroute to 174.31.0.219 (174.31.0.219), 30 hops max, 40 byte packets
1 * * *
2 * * *

How to fix this problem?
Back to top
View user's profile Send private message
chatgris
Guru
Guru


Joined: 14 Oct 2002
Posts: 383
Location: Canada

PostPosted: Mon Jun 13, 2005 9:48 pm    Post subject: Reply with quote

**EDIT It came back up**

The polbox url has been down for a few days now.. is there anywhere else I can get the patch for the 2.6.11 kernel?

Josh.
_________________
Open your mind. Open your source.

Due credit for avatar from http://www.aikida.net


Last edited by chatgris on Mon Jun 27, 2005 3:45 pm; edited 1 time in total
Back to top
View user's profile Send private message
wmgoree
Apprentice
Apprentice


Joined: 08 Aug 2003
Posts: 246
Location: Alexandria, VA

PostPosted: Tue Jun 14, 2005 6:04 am    Post subject: Re: remote login to PPTP VPN from home Reply with quote

powah wrote:

My destination IP address is 174.31.0.219 with gateway address 174.31.0.1, so I do this.
# route add -net 174.31.0.0 netmask 255.255.255.0 dev ppp0
# netstat -rn
Kernel IP routing table
Code:

Destination   Gateway       Genmask         Flags  MSS Window  irtt Iface
10.0.1.1      0.0.0.0       255.255.255.255 UH      0 0          0 ppp0
174.31.0.0    0.0.0.0       255.255.255.0   U       0 0          0 ppp0
192.168.2.0   0.0.0.0       255.255.255.0   U       0 0          0 eth0
127.0.0.0     127.0.0.1     255.0.0.0       UG      0 0          0 lo
0.0.0.0       192.168.2.1   0.0.0.0         UG      0 0          0 eth0


# traceroute 174.31.0.219
traceroute to 174.31.0.219 (174.31.0.219), 30 hops max, 40 byte packets
1 * * *
2 * * *

How to fix this problem?


You need the route through your physical interface to the VPN server, in your case 174.31.0.219 (if I'm reading your message right).
So:
Code:

# route add -host 174.31.0.219 gw 192.168.2.1 dev eth0

_________________
vi? *snicker* it doesn't even include a mail reader...
Back to top
View user's profile Send private message
Lore
Apprentice
Apprentice


Joined: 16 Feb 2004
Posts: 152
Location: Karlsruhe

PostPosted: Fri Jun 17, 2005 3:13 am    Post subject: Reply with quote

Hm, I'm trying now for five hours to establish a connection to an pptp vpn server. I'v read all docu twice, built in all modules, set the MPPE use flag etc.

My problem:
Code:

t36c103 bernhard # pon iww debug dump logfd 2 nodetach
pppd options in effect:
debug           # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname iww            # (from /etc/ppp/peers/iww)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
refuse-eap              # (from /etc/ppp/peers/iww)
name bekau              # (from /etc/ppp/peers/iww)
remotename iww          # (from /etc/ppp/peers/iww)
                # (from /etc/ppp/options.pptp)
pty pptp vpn.iww.uni-karlsruhe.de --nolaunchpppd                # (from /etc/ppp/peers/iww)
ipparam iww             # (from /etc/ppp/peers/iww)
usepeerdns              # (from /etc/ppp/peers/iww)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
using channel 21
Using interface ppp0
Connect: ppp0 <--> /dev/pts/2
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x3f2cee24> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth eap> <magic 0x7304c22e> <pcomp> <accomp>]
sent [LCP ConfNak id=0x1 <auth chap MD5>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x3f2cee24> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x2 <mru 1450> <asyncmap 0x0> <auth chap MD5> <magic 0x7304c22e> <pcomp> <accomp>]
sent [LCP ConfAck id=0x2 <mru 1450> <asyncmap 0x0> <auth chap MD5> <magic 0x7304c22e> <pcomp> <accomp>]
rcvd [LCP EchoReq id=0x0 magic=0x7304c22e]
sent [LCP EchoRep id=0x0 magic=0x3f2cee24]
rcvd [CHAP Challenge id=0x6e <4643704a62f75fbb7bab46f266254544a26b6efdc01705>, name = "pptpd"]
sent [CHAP Response id=0x6e <127dba693d2bdd6faf731e31c6e74971>, name = "bekau"]
rcvd [CHAP Success id=0x6e "Access granted"]
CHAP authentication succeeded: Access granted
sent [CCP ConfReq id=0x1 <mppe -H -M -S -L -D +C>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 172.20.67.68> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
rcvd [LCP TermReq id=0x3 "MPPE required but not available"]
LCP terminated by peer (MPPE required but not available)
sent [LCP TermAck id=0x3]
Connection terminated.
using channel 22
Using interface ppp0
Connect: ppp0 <--> /dev/pts/3
Waiting for 2 child processes...
  script pptp vpn.iww.uni-karlsruhe.de --nolaunchpppd , pid 10175
  script pptp vpn.iww.uni-karlsruhe.de --nolaunchpppd , pid 10154
sending SIGTERM to process 10175
sending SIGTERM to process 10154
Script pptp vpn.iww.uni-karlsruhe.de --nolaunchpppd  finished (pid 10154), status = 0x0
tcflush failed: Bad file descriptor


My options.pptp:
Code:


# Lock the port
#
lock

#
# We don't need the tunnel server to authenticate itself
#
noauth

#
# Turn off transmission protocols we know won't be used
#
nobsdcomp
nodeflate


My peer:
Code:

# name of tunnel, used to select lines in secrets files
remotename iww

# name of tunnel, used to name /var/run pid file
linkname iww

# name of tunnel, passed to ip-up scripts
ipparam iww

# data stream for pppd to use
pty "pptp vpn.iww.uni-karlsruhe.de --nolaunchpppd "

# domain and username, used to select lines in secrets files
name bekau

usepeerdns
#mppe required,stateless
refuse-eap


# adopt defaults from the pptp-linux package
file /etc/ppp/options.pptp


Has anybody a hint?
Back to top
View user's profile Send private message
thoughtform
l33t
l33t


Joined: 24 May 2004
Posts: 600

PostPosted: Sun Jun 26, 2005 7:46 pm    Post subject: Reply with quote

i need the mpp3 patch for 2.6.11r10 and 2.6.12
the url listed for polbox doesn't work.
thanks
Back to top
View user's profile Send private message
scarr
Tux's lil' helper
Tux's lil' helper


Joined: 24 Jun 2002
Posts: 88
Location: Lebanon, TN

PostPosted: Thu Jul 07, 2005 11:56 pm    Post subject: Reply with quote

I have the patch for 2.6.11-r10 for mppe_mccp. That is in, I tested with the commands on the pptpclient site. I have added mppe-mccp to the use flags and recompiled ppp-2.4.3.

modprobe ppp_mppe_mccp - it works

if I try: pptp IPADD call PPPFile

I get unrecognized option "require-mppe".

Any ideas?
_________________
Scott Carr * OpenOffice.org * Documentation Maintainer
http://documentation.openoffice.org
jabber: scarr@progbits.com
Back to top
View user's profile Send private message
scarr
Tux's lil' helper
Tux's lil' helper


Joined: 24 Jun 2002
Posts: 88
Location: Lebanon, TN

PostPosted: Thu Jul 07, 2005 11:57 pm    Post subject: Reply with quote

Does the 1.1 ppp patch and the 1.3 kernel patch work together?

They are listed on the po site as the latest patches for the respective programs.
_________________
Scott Carr * OpenOffice.org * Documentation Maintainer
http://documentation.openoffice.org
jabber: scarr@progbits.com
Back to top
View user's profile Send private message
taskara
Advocate
Advocate


Joined: 10 Apr 2002
Posts: 3763
Location: Australia

PostPosted: Fri Jul 22, 2005 8:34 am    Post subject: Reply with quote

greetings

when you say in your guide
Quote:
Add this to modules.d.
Code:

# nano -w /etc/modules.d/ppp
ppp-compress-18
ppp_mppe


do you mean to add them to /etc/modules.autoload.d/kernel-2.x?

or as an alias under modules.d/ppp ?

also, ppp-compress-18 and ppp_mppe don't seem to exist, but I do have ppp_mppe_mppc

cheers
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer!
Back to top
View user's profile Send private message
astralbat
n00b
n00b


Joined: 23 Jan 2005
Posts: 33

PostPosted: Fri Aug 19, 2005 8:54 pm    Post subject: Reply with quote

scarr wrote:
I have the patch for 2.6.11-r10 for mppe_mccp. That is in, I tested with the commands on the pptpclient site. I have added mppe-mccp to the use flags and recompiled ppp-2.4.3.

modprobe ppp_mppe_mccp - it works

if I try: pptp IPADD call PPPFile

I get unrecognized option "require-mppe".

Any ideas?


I am also having these same problems on a 2.6.12.2 vanilla kernel. I have the ppp_mppe_mppc module and I have confirmed my ppp has mppe-mppc by following the instructions on the pptpclient site!
This only used to work for me last week.. but I have noticed I recently upgraded to 2.4.3-r8 from 2.4.3-r6 and the mppe-mppc option was strangely commented out, but even after downgrading to 2.4.3-r6, I still get the error: unrecognized option 'require-mppe'. I have tried various ways of specifying the option 'require-mppe-128', but to no avail.

Anyone else encountered this?
Back to top
View user's profile Send private message
xsong
n00b
n00b


Joined: 26 Nov 2004
Posts: 27

PostPosted: Tue Aug 23, 2005 5:29 pm    Post subject: Reply with quote

I can not get the pathes from http://www.polbox.com/h/hs001/
BTW, my kernel is linux-2.6.12-gentoo-r6, can I use the patches for 2.6.11?

Thanks.
Back to top
View user's profile Send private message
astralbat
n00b
n00b


Joined: 23 Jan 2005
Posts: 33

PostPosted: Tue Aug 23, 2005 7:18 pm    Post subject: Reply with quote

astralbat wrote:
scarr wrote:
I have the patch for 2.6.11-r10 for mppe_mccp. That is in, I tested with the commands on the pptpclient site. I have added mppe-mccp to the use flags and recompiled ppp-2.4.3.

modprobe ppp_mppe_mccp - it works

if I try: pptp IPADD call PPPFile

I get unrecognized option "require-mppe".

Any ideas?


I am also having these same problems on a 2.6.12.2 vanilla kernel. I have the ppp_mppe_mppc module and I have confirmed my ppp has mppe-mppc by following the instructions on the pptpclient site!
This only used to work for me last week.. but I have noticed I recently upgraded to 2.4.3-r8 from 2.4.3-r6 and the mppe-mppc option was strangely commented out, but even after downgrading to 2.4.3-r6, I still get the error: unrecognized option 'require-mppe'. I have tried various ways of specifying the option 'require-mppe-128', but to no avail.

Anyone else encountered this?


I am answering myself here. It seems my problems were a combination of the VPN Server needing rebooting (Windows, eh!) and adjusting the parameters to turn of chapv2 authentication and use "mppe required" instead of "require-mppe".
Back to top
View user's profile Send private message
astralbat
n00b
n00b


Joined: 23 Jan 2005
Posts: 33

PostPosted: Tue Aug 23, 2005 7:22 pm    Post subject: Reply with quote

xsong wrote:
I can not get the pathes from http://www.polbox.com/h/hs001/
BTW, my kernel is linux-2.6.12-gentoo-r6, can I use the patches for 2.6.11?

Thanks.


polbox has been down for a little while for some reason. I don't know where you can get the patches now? Anyone?

Patching 2.6.12 with 2.6.11 patch seems a bit unlikely it will work. Though I normally patch fine when the difference is a minor version or two.
But you can always try and if it doesn't succeed, you can reverse it.
Back to top
View user's profile Send private message
Section_8
l33t
l33t


Joined: 22 May 2004
Posts: 627

PostPosted: Wed Aug 24, 2005 2:05 am    Post subject: Reply with quote

Quote:
polbox has been down for a little while for some reason. I don't know where you can get the patches now? Anyone?


I have some old copies of the patch laying around. Posted here:

linux-2.6.9-mppe-mppc-1.2.patch
linux-2.6.10-mppe-mppc-1.2.patch
linux-2.6.11-mppe-mppc-1.3.patch
linux-2.6.12-mppe-mppc-1.3.patch

I hope polbox is coming back up soon.
Back to top
View user's profile Send private message
xsong
n00b
n00b


Joined: 26 Nov 2004
Posts: 27

PostPosted: Wed Aug 24, 2005 2:18 am    Post subject: Reply with quote

very nice of you.Thanks.
_________________
----------------------------------------------------
You should work really hard to earn a decent life!!
Do I? Don't I?
---------------------------------------------------
Back to top
View user's profile Send private message
xsong
n00b
n00b


Joined: 26 Nov 2004
Posts: 27

PostPosted: Wed Aug 24, 2005 7:34 pm    Post subject: Reply with quote

Hi there,

I followed the first post in this thread to setup my vpn connection to my school. I just could not make it.

Here is the error after I run:
Code:
pppd call my_peer logfd 2 nodetach debug dump

and try to make a connection through ppp.

The error:
Code:
pppd options in effect:
debug      # (from command line)
nodetach      # (from command line)
logfd 2      # (from command line)
dump      # (from command line)
noauth      # (from /etc/ppp/options.pptp)
name ads\\xsong      # (from /etc/ppp/peers/my_peer)
remotename PPTP      # (from /etc/ppp/peers/my_peer)
      # (from /etc/ppp/options.pptp)
pty pptp vpn.indiana.edu --nolaunchpppd      # (from /etc/ppp/peers/my_peer)
ipparam my_peer      # (from /etc/ppp/peers/my_peer)
nobsdcomp      # (from /etc/ppp/options.pptp)
nodeflate      # (from /etc/ppp/options.pptp)
using channel 4
Using interface ppp0
Connect: ppp0 <--> /dev/pts/2
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x676e89d8> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <auth chap MS-v2>]
sent [LCP ConfAck id=0x0 <auth chap MS-v2>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x676e89d8> <pcomp> <accomp>]
rcvd [CHAP Challenge id=0x1 <c01a5ce61f1514edc2715b8030574187>, name = ""]
sent [CHAP Response id=0x1 <04ab60178e7bfe9c35b05b425d9f944198bcbffa11ebb7becca2
2c0f160212113d5f47d970ea1794d1722ca8f97765e798>, name = "ads\\xsong"]
rcvd [CHAP Challenge id=0x2 <ea2ab162160bf5fcc2715b8030574187>, name = ""]
sent [CHAP Response id=0x2 <66db5a819380860cf1f2406e633d635a98bcbffa11ebb7beba58
7d6b875057d723db18063f69492055e48f1bd9241e0498>, name = "ads\\xsong"]
rcvd [CHAP Success id=0x2 "S=311D001DE064EEB0671DCDBB4C3F9BE6E997E2C4"]
sent [CCP ConfReq id=0x1 <mppe -H -M -S -L -D +C>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 129.79.159.172>]
rcvd [IPCP ConfReq id=0x0 <addr 10.0.0.1>]
sent [IPCP ConfAck id=0x0 <addr 10.0.0.1>]
rcvd [CCP ConfReq id=0x0 <mppe +H -M +S +L -D -C>]
sent [CCP ConfNak id=0x0 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfNak id=0x1 <mppe +H -M +S +L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x1 <mppe -H -M +S -L -D -C>]
sent [CCP ConfAck id=0x1 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfNak id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x3 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x3 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
rcvd [IPCP ConfReq id=0x1 <addr 10.0.0.1>]
sent [IPCP ConfAck id=0x1 <addr 10.0.0.1>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 129.79.159.172>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 129.79.159.172>]
rcvd [IPCP ConfNak id=0x2 <addr 156.56.80.36>]
sent [IPCP ConfReq id=0x3 <addr 156.56.80.36>]
rcvd [IPCP ConfAck id=0x3 <addr 156.56.80.36>]
local  IP address 156.56.80.36
remote IP address 10.0.0.1
Script /etc/ppp/ip-up started (pid 4908)
Script /etc/ppp/ip-up finished (pid 4908), status = 0x1
read: Value too large for defined data type
read: Value too large for defined data type
read: Value too large for defined data type
read: Value too large for defined data type
read: Value too large for defined data type
read: Value too large for defined data type
read: Value too large for defined data type
rcvd [LCP TermReq id=0x8]
LCP terminated by peer
Connect time 0.5 minutes.
Sent 10500 bytes, received 0 bytes.
Script /etc/ppp/ip-down started (pid 4914)
sent [LCP TermAck id=0x8]
Script /etc/ppp/ip-down finished (pid 4914), status = 0x1
Connection terminated.
using channel 5
Using interface ppp0
Connect: ppp0 <--> /dev/pts/5
Waiting for 2 child processes...
  script pptp vpn.indiana.edu --nolaunchpppd, pid 4916
  script pptp vpn.indiana.edu --nolaunchpppd, pid 4901
sending SIGTERM to process 4916
sending SIGTERM to process 4901
tcflush failed: Bad file descriptor


Can somebody tell me what's going wrong?
_________________
----------------------------------------------------
You should work really hard to earn a decent life!!
Do I? Don't I?
---------------------------------------------------
Back to top
View user's profile Send private message
astralbat
n00b
n00b


Joined: 23 Jan 2005
Posts: 33

PostPosted: Wed Aug 24, 2005 7:50 pm    Post subject: Reply with quote

xsong wrote:


Can somebody tell me what's going wrong?


Have you tried setting the MTU/MRU?
Back to top
View user's profile Send private message
xsong
n00b
n00b


Joined: 26 Nov 2004
Posts: 27

PostPosted: Wed Aug 24, 2005 7:53 pm    Post subject: Reply with quote

I tried to set them first,
I can not even connect to vpn server.

If I did not set them, I can connect to the vpn server. But it still does not work for me. The error is the error when I did not set them.
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Wed Aug 24, 2005 8:39 pm    Post subject: Reply with quote

After following the manual closely and 89,343 kernel compiles, I finally got MPPE working and I'm able to connect to a PPTP server as shown below:

Code:

ppp0      Link encap:Point-to-Point Protocol
          inet addr:209.123.134.229  P-t-P:209.123.134.225  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1496  Metric:1
          RX packets:9 errors:0 dropped:0 overruns:0 frame:0
          TX packets:481927 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:104 (104.0 b)  TX bytes:170146108 (162.2 Mb)


...but, there is a BUT. I'm able to ping the .225 address (far end) but nothing else on the remote network. When I connect from a Windows system everything works as expected. Here's my routing table after making a connection:

Code:

192.168.199.0   0.0.0.0         255.255.255.0   U         0 0          0 eth0
127.0.0.0       127.0.0.1       255.0.0.0       UG        0 0          0 lo
0.0.0.0         209.123.134.229 0.0.0.0         UG        0 0          0 ppp0
0.0.0.0         192.168.199.5   0.0.0.0         UG        0 0          0 eth0


The PPTP server logs the following message every time I connect:

Code:

The user DOMAIN\user has connected and has been successfully authenticated on port VPN3-63. Data sent and received over this link is strongly encrypted. 


...and this one every time I disconnect (the 0 bytes sent and received bugs me):
Code:

The user DOMAIN\user connected on port VPN3-63 on 08/24/2005 at 04:31pm and disconnected on 08/24/2005 at 04:33pm.  The user was active for 1 minutes 56 seconds.  0 bytes were sent and 0 bytes were received. The port speed was 12500000.  The reason for disconnecting was user request.


What am I doing wrong?

Thanks!
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Thu Aug 25, 2005 1:55 am    Post subject: Reply with quote

I sorted out some of the routing issues. It seems as though I have to create a static route for every single host that's on the same subnet as the VPN server's IP address since "-net" hoses everything if I do:

Code:

route add -net 209.123.134.0 netmask 255.255.254.0 dev ppp0


This works fine:
Code:

route add 209.123.134.22 dev ppp0


"route -net" also works for all the other subnets (multihomed network).
Back to top
View user's profile Send private message
router
n00b
n00b


Joined: 24 Mar 2003
Posts: 21

PostPosted: Fri Aug 26, 2005 4:19 pm    Post subject: Reply with quote

thank you, I was needing this.
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Sat Aug 27, 2005 12:16 am    Post subject: Reply with quote

I'd like to find a cleaner way of doing this but I decided to write a little script that would actually loop through the list of hosts on the subnet that the server is on and add static routes to for each one [excluding the address of the server and some other hosts that I definitely won't be accessing over the vpn]:

Code:

#!/bin/bash
Y="209.123.134."
X=1
Z="Adding static route for: "
while [ $X -le 9 ]
do
        /usr/bin/echo $Z$Y$X
        /sbin/route add $Y$X dev ppp0
        X=$((X+1))
done
X=11
while [ $X -le 224 ]
do
        /usr/bin/echo $Z$Y$X
        /sbin/route add $Y$X dev ppp0
        X=$((X+1))
done
X=232
while [ $X -le 254 ]
do
        /usr/bin/echo $Z$Y$X
        /sbin/route add $Y$X dev ppp0
        X=$((X+1))
done
Back to top
View user's profile Send private message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1247
Location: Edinburgh, UK

PostPosted: Sun Aug 28, 2005 11:58 am    Post subject: Reply with quote

Hi,

I'm thinking of having a go at this myself, though I've never patched a kernel before so I have a bit of reading to do first. I was just wondering:

Can a portage overlay be used for the kernel-source, to make it easier to re-apply the patch? If so I'd be grateful for some steps on how to do this. I've used overlays before (for Firefox and Thunderbird) but that was just for the purposes of using an edited ebuild. What would I have to do to make it use this patch every time?
Back to top
View user's profile Send private message
Ph0eniX
Guru
Guru


Joined: 24 Sep 2004
Posts: 502
Location: New York, U.S.

PostPosted: Wed Aug 31, 2005 7:19 pm    Post subject: Reply with quote

I did "emerge --update world" and it looks like my /usr/sbin/pppd was replaced. Now when I try to start a tunnel, it says:
Code:

/usr/sbin/pppd: In file /etc/ppp/peers/tunnel: unrecognized option 'require-mppe-128'
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page Previous  1, 2, 3, 4, 5  Next
Page 3 of 5

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum